JOB SUMMARY

This position is responsible for assisting in the development and enforcement of the county’s cybersecurity policies, practices, and regulatory compliance efforts. The Security & Compliance Specialist monitors daily security events and supports in collaboration with other IT personnel. Emphasis is placed on foundational security knowledge and continuous learning to stay updated on emerging threats.

KNOWLEDGE REQUIRED BY THE POSITION

• Knowledge of multiple computer systems, programs, and architecture.
• Knowledge of the principles and techniques of computerized information management, including system design and analysis, hardware and software, database applications, and network applications and capabilities.
• Knowledge of computer industry trends and standards.
• Knowledge of internet and worldwide web protocols.
• Knowledge of SQL server maintenance.
• Knowledge of cloud computing and the use of cloud techniques.
• Knowledge of cyber security principles.
• Skill in troubleshooting and resolving computer hardware and software problems.
• Skill in problem solving.
• Skill in prioritizing and planning.
• Skill in interpersonal relations.
• Skill in directing the work of personnel.
• Skill in oral and written communication.

MINIMUM QUALIFICATIONS

• Education: Associates degree or Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience).
• Experience: 2-4 years of IT support experience (help desk, technical internship) with exposure to servers, virtualization, or networking.
• Certifications: Preferred certifications include CompTIA A+, Network+, or Server+; Microsoft MTA or M365 Fundamentals.
• Skills: Strong understanding of Windows Server, virtualization platforms, scripting (PowerShell), backup and recovery solutions, and system security protocols.
• Possession of or ability to readily obtain a valid driver’s license issued by the State of Georgia for the type of vehicle or equipment operated.

Policy & Procedure Assistance:

• Supports the CIO in creating or updating cybersecurity policies aligned with relevant standards (e.g., NIST, CJIS, PCI DSS).
• Contributes to compliance audits and helps prepare documentation for external or internal reviews.

Security Event Monitoring:

• Monitors alerts from tools such as Endpoint Detection and AI Security Tools; identifies anomalies or potential threats.
• Coordinates with vendors to verify, document, and escalate alerts as necessary.